medium4.0
CVE-2024-6381
The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative o…
Impact
The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mongodb | Libbson | before 1.26.2 |